OpenAFS Master Repository branch, master, updated. BP-openafs-stable-1_8_x-220-gd5816fd
Gerrit Code Review
gerrit@openafs.org
Tue, 11 Sep 2018 15:01:00 -0400
The following commit has been merged in the master branch:
commit 70b0136d552a0077d3fae68f3aebacd985abd522
Author: Mark Vitale <mvitale@sinenomine.net>
Date: Mon Jun 25 18:03:12 2018 -0400
OPENAFS-SA-2018-002 ptserver: prevent PR_IDToName information leak
SPR_IDToName does not completely initialize the return array of names,
and thus leaks information from ptserver memory:
- up to 62 bytes per requested id (PR_MAXNAMELEN 64 - 'a\0')
Use calloc to ensure that all memory sent on the wire is initialized,
preventing the information leak.
[kaduk@mit.edu: switch to calloc; update commit message]
Change-Id: Iad623f2cc4c54b79f14a64b8714ba12579d05447
src/ptserver/ptprocs.c | 2 +-
1 files changed, 1 insertions(+), 1 deletions(-)
--
OpenAFS Master Repository